Double free in Linux kernel - CVE-2026-74502
Published: August 16, 2026
Vulnerability identifier: #VU143273
CSH Severity: Medium
CVSS v4: 5.1 [CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-74502
CWE-ID: CWE-415
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows an attacker with physical access to cause a denial of service.
The vulnerability exists due to double free in snd_ump_attach_legacy_rawmidi() and snd_ump_endpoint_free() when enumerating a USB MIDI 2.0 (UMP) device that causes snd_rawmidi_new() to fail. An attacker with physical access can connect a crafted USB device to trigger the double free and cause a denial of service.
The issue is reached during device enumeration and later endpoint teardown.
Affected software
Linux kernel
Debian Linux
linux (Debian package)
Debian Linux
linux (Debian package)
How to mitigate CVE-2026-74502
Install security update from vendor's repository.
Linux kernel - update to 7.0 rc3
linux (Debian package) - update to 6.12.105-1
linux (Debian package) - update to 6.12.105-1
External References
- https://git.kernel.org/stable/c/032746c2dd9a4ea0774b04ac8a29e2ea628f106e
- https://git.kernel.org/stable/c/3302aaeac4f7ee6b775850db21d5f61064ce70ad
- https://git.kernel.org/stable/c/70c977815af0d997feb2d0c5d284d55689bf7051
- https://git.kernel.org/stable/c/c57001f55f97ef856fb6527e376c5c4a056a53a4
- https://git.kernel.org/stable/c/e84d2e53a05c78a04d1343eeb0f31a79456e79fc